Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/58d15b-9f02-42c4-b02d-a01eea65fd33/1/Cani7ovOptW5GcSjPSbZu_mCqEM.mft
File: Cani7ovOptW5GcSjPSbZu_mCqEM.mft (raw, json)
Hash identifier: 2fzUPNiRwvf1rLlupdbVUWzlwkorxOA6m8SCa5SxPV4=
Subject key identifier: 5D:6E:6A:09:60:93:BC:0E:9A:E4:D0:B5:D5:7B:BF:B2:7E:C8:51:7C
Authority key identifier: 09:A9:E2:EE:8B:CE:A6:D5:B9:19:C4:A3:3D:26:D9:BB:F9:82:A8:43
Certificate issuer: /CN=09a9e2ee8bcea6d5b919c4a33d26d9bbf982a843
Certificate serial: 019EBF919D5475C93808CF44FD40654438F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cani7ovOptW5GcSjPSbZu_mCqEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/58d15b-9f02-42c4-b02d-a01eea65fd33/1/Cani7ovOptW5GcSjPSbZu_mCqEM.mft
Manifest number: 0DD8
Signing time: Sat 13 Jun 2026 06:00:51 +0000
Manifest this update: Sat 13 Jun 2026 06:00:51 +0000
Manifest next update: Sun 14 Jun 2026 06:00:51 +0000
Files and hashes: 1: Cani7ovOptW5GcSjPSbZu_mCqEM.crl (hash: VAx/aAU3ycUt4967vslvD/Hm1XsSK9MeAe+hHxfHPWc=)
2: ToM6N48G8WGMzFpuQ0Gt_pOWEHc.roa (hash: f5NlaoVCrJ+ZbPHrxjLY8hxzqQ0aKUh9p8kFFA8E7Vo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/58d15b-9f02-42c4-b02d-a01eea65fd33/1/Cani7ovOptW5GcSjPSbZu_mCqEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/58d15b-9f02-42c4-b02d-a01eea65fd33/1/Cani7ovOptW5GcSjPSbZu_mCqEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cani7ovOptW5GcSjPSbZu_mCqEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:91:9d:54:75:c9:38:08:cf:44:fd:40:65:44:38:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09a9e2ee8bcea6d5b919c4a33d26d9bbf982a843
Validity
Not Before: Jun 13 06:00:51 2026 GMT
Not After : Jun 14 06:00:51 2026 GMT
Subject: CN=5d6e6a096093bc0e9ae4d0b5d57bbfb27ec8517c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:cf:9a:d2:dc:c7:6a:30:f1:02:9f:23:0e:b2:
06:0a:44:0f:37:b1:f2:6a:4e:2f:ed:cd:cd:4a:b6:
ad:5a:45:8f:c7:9b:0f:82:6c:c3:af:4f:e8:1d:06:
84:b8:df:9c:8b:3a:89:53:09:f5:72:f4:12:09:db:
2c:0b:91:1f:0b:4d:dc:be:53:9b:dc:53:6e:f1:e8:
22:e9:4e:00:d0:96:05:99:3c:b4:9e:f0:ab:7a:53:
ea:6d:c1:a6:d6:c6:61:13:ea:b1:9c:85:b5:43:b4:
d1:c8:7d:c6:e0:16:b4:d8:1d:a5:be:f3:39:77:f3:
cf:af:1f:f5:d7:8c:b9:84:43:33:36:90:96:c5:5b:
54:1d:2d:0d:e9:12:b6:78:bb:56:36:e4:ff:a8:07:
0d:50:be:d5:f0:ca:47:30:f8:98:4f:41:f9:64:8f:
9e:17:6f:4f:f2:ce:f5:b7:61:55:4b:a4:a3:e8:da:
5c:8f:0b:40:46:28:b5:9a:69:6e:6a:30:90:25:fd:
22:ef:18:53:50:aa:4e:89:8b:4c:b9:49:44:58:e0:
56:48:41:33:b6:b6:15:27:1a:78:16:18:d6:08:68:
4b:c2:6e:85:70:bc:4d:24:66:ee:45:4e:df:c0:b7:
a9:df:8f:5e:1d:89:0f:01:35:35:33:be:6b:c0:a9:
70:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:6E:6A:09:60:93:BC:0E:9A:E4:D0:B5:D5:7B:BF:B2:7E:C8:51:7C
X509v3 Authority Key Identifier:
keyid:09:A9:E2:EE:8B:CE:A6:D5:B9:19:C4:A3:3D:26:D9:BB:F9:82:A8:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cani7ovOptW5GcSjPSbZu_mCqEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/58d15b-9f02-42c4-b02d-a01eea65fd33/1/Cani7ovOptW5GcSjPSbZu_mCqEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/58d15b-9f02-42c4-b02d-a01eea65fd33/1/Cani7ovOptW5GcSjPSbZu_mCqEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:cf:f0:29:66:28:01:f5:9a:63:b2:eb:b8:c3:fe:c6:e2:d1:
49:45:68:6a:d5:36:3c:a8:d2:eb:75:0f:61:3e:1b:0e:ee:a4:
fa:b4:ea:ed:a5:e0:6c:ed:cf:15:3f:9c:6b:d7:20:e7:53:6a:
89:04:d9:b9:f1:a3:da:26:d0:10:6e:83:e2:80:28:a6:d2:72:
6d:31:74:55:07:17:bc:4d:75:56:ea:0e:f9:1d:2f:9c:10:a1:
8c:b5:11:de:5c:53:bf:2f:d0:29:52:f4:c3:a3:3e:8a:11:d2:
98:b1:0c:75:41:73:38:93:db:ec:c1:6e:92:0e:b1:c9:a5:bf:
b6:0d:81:db:8b:ca:00:85:ad:88:03:52:bb:c6:21:28:1c:50:
07:89:f1:31:b5:3a:dd:85:01:0a:a3:0b:6d:ed:fe:4c:39:de:
64:ee:a6:73:e9:f4:28:c4:3c:20:ba:e6:fa:7e:a4:f3:30:c6:
56:8e:99:7d:5f:6c:a6:69:76:07:2d:e8:a8:99:90:b6:fa:4b:
95:03:40:d0:b7:55:11:cb:30:fa:db:91:63:d4:69:0a:eb:4b:
22:c5:1d:34:53:da:33:33:e1:77:d0:5a:8a:01:51:14:11:2d:
05:03:fd:eb:be:64:1a:a4:43:3d:44:20:7e:87:7b:98:85:d5:
14:01:f4:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6/kZ1Udck4CM9E/UBlRDjyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5YTllMmVlOGJjZWE2ZDViOTE5YzRhMzNkMjZkOWJiZjk4
MmE4NDMwHhcNMjYwNjEzMDYwMDUxWhcNMjYwNjE0MDYwMDUxWjAzMTEwLwYDVQQD
Eyg1ZDZlNmEwOTYwOTNiYzBlOWFlNGQwYjVkNTdiYmZiMjdlYzg1MTdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAss+a0tzHajDxAp8jDrIGCkQPN7Hy
ak4v7c3NSratWkWPx5sPgmzDr0/oHQaEuN+cizqJUwn1cvQSCdssC5EfC03cvlOb
3FNu8egi6U4A0JYFmTy0nvCrelPqbcGm1sZhE+qxnIW1Q7TRyH3G4Ba02B2lvvM5
d/PPrx/114y5hEMzNpCWxVtUHS0N6RK2eLtWNuT/qAcNUL7V8MpHMPiYT0H5ZI+e
F29P8s71t2FVS6Sj6NpcjwtARii1mmluajCQJf0i7xhTUKpOiYtMuUlEWOBWSEEz
trYVJxp4FhjWCGhLwm6FcLxNJGbuRU7fwLep349eHYkPATU1M75rwKlw1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF1uaglgk7wOmuTQtdV7v7J+yFF8MB8GA1UdIwQY
MBaAFAmp4u6LzqbVuRnEoz0m2bv5gqhDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2FuaTdvdk9wdFc1R2NTalBTYlp1X21DcUVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS81OGQxNWItOWYwMi00MmM0LWIwMmQt
YTAxZWVhNjVmZDMzLzEvQ2FuaTdvdk9wdFc1R2NTalBTYlp1X21DcUVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS81OGQxNWItOWYwMi00MmM0LWIwMmQtYTAxZWVhNjVmZDMz
LzEvQ2FuaTdvdk9wdFc1R2NTalBTYlp1X21DcUVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu8/wKWYo
AfWaY7LruMP+xuLRSUVoatU2PKjS63UPYT4bDu6k+rTq7aXgbO3PFT+ca9cg51Nq
iQTZufGj2ibQEG6D4oAoptJybTF0VQcXvE11VuoO+R0vnBChjLUR3lxTvy/QKVL0
w6M+ihHSmLEMdUFzOJPb7MFukg6xyaW/tg2B24vKAIWtiANSu8YhKBxQB4nxMbU6
3YUBCqMLbe3+TDneZO6mc+n0KMQ8ILrm+n6k8zDGVo6ZfV9spml2By3oqJmQtvpL
lQNA0LdVEcsw+tuRY9RpCutLIsUdNFPaMzPhd9BaigFRFBEtBQP9675kGqRDPUQg
fod7mIXVFAH03Q==
-----END CERTIFICATE-----
Generated at Sat Jun 13 10:30:44 2026 by rpki-client